Kubernetes Security Best Practices - Ian Lewis (Google)

Kubernetes has become the de-facto orchestration tool but it has some pitfalls to keep in mind with regard to security. How can we make containers more secure? How do we apply existing tools to our containers? How can we apply policy to containers so they only have access to what they need and nothing more? In this talk attendees will learn about specific security risks and see tools like PodSecurityPolicy, SELinux/AppArmor, and seccomp in action to mitigate those risks. Then we’ll go up the stack and learn how to apply network policy to containers and further improve security.